Merge pull request #5197 from nonamethanks/fix-bur-links

BURs: don't allow edits to approved scripts
2022-06-01 18:37:09 -05:00
parent 173e43b192 5932d8d3a3
commit 434e44ba8b
2 changed files with 4 additions and 4 deletions
--- a/app/policies/bulk_update_request_policy.rb
+++ b/app/policies/bulk_update_request_policy.rb
@@ -6,7 +6,7 @@ class BulkUpdateRequestPolicy < ApplicationPolicy
  end

  def update?
-    unbanned? && (user.is_admin? || record.user_id == user.id)
+    unbanned? && !record.is_approved? && (user.is_admin? || record.user_id == user.id)
  end

  def approve?